In self-hosted n8n instances where the Code node runs in legacy (non-task-runner) JavaScript execution mode, authenticated users with workflow editing access can invoke internal helper functions from within the Code node.
This allows a workflow editor to perform actions on the n8n host with the same privileges as the n8n process, including:
Starting with n8n version 1.2.1, access to files in the n8n home directory (.n8n) is blocked by default. However, this does not restrict access to other parts of the filesystem unless additional file access limitations are configured.
N8N_RUNNERS_ENABLED=true.If you cannot immediately migrate to task runners:
N8N_RESTRICT_FILE_ACCESS_TO to a dedicated directory (e.g., ~/.n8n-files) and ensure it contains no sensitive data.N8N_BLOCK_FILE_ACCESS_TO_N8N_FILES=true (default) to block access to .n8n and user-defined config files.NODES_EXCLUDE.2.0.0Exploitability
AV:NAC:LPR:LUI:NScope
S:UImpact
C:LI:HA:NCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N